$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c28b8968-a78b-3ae4-ac6d-961f2dc682ae.roa File: c28b8968-a78b-3ae4-ac6d-961f2dc682ae.roa (raw, json) Hash identifier: 7f4xTJ4nWDHD3pumPRLo5moG3vLH6GIVqSRqB7Z+ruA= Subject key identifier: 48:D8:6D:F4:35:93:6B:99:F2:65:CA:44:2B:75:55:1A:64:0B:05:7D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584944694E2CFCD3C66BB49EEE40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c28b8968-a78b-3ae4-ac6d-961f2dc682ae.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 8069 IP address blocks: 20.33.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:4e:2c:fc:d3:c6:6b:b4:9e:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=b6b97b15-7bd9-4cf4-92c7-dc5b73543a59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:03:0d:9c:69:d1:25:98:26:1b:f7:ac:9e:cb: 5c:56:c3:aa:dc:3b:97:8b:56:59:53:46:ad:98:6e: aa:f0:c8:51:85:18:be:48:1d:db:01:6c:85:d0:45: 97:1d:29:e8:fb:bf:ee:e7:4a:8b:02:e3:05:7a:40: 9f:c1:07:53:2a:23:fd:de:2c:ad:44:ad:48:0f:33: 58:8a:a8:0c:51:36:b3:77:72:98:79:6f:85:5b:60: c4:49:44:ce:42:f6:00:91:48:84:1c:66:86:1c:bf: ed:86:d9:ad:c8:54:fd:4a:67:0b:46:27:92:22:f2: 80:5c:b8:55:32:76:8e:53:e4:ae:ff:b2:37:6c:2d: 3b:4f:bd:c1:ad:43:8d:24:dc:59:0a:35:76:b3:a7: 15:28:67:e9:a8:13:35:7b:6e:ee:0c:ca:0a:a5:d5: 86:f7:06:0b:df:56:61:26:51:70:23:21:2c:33:d2: 81:f1:8d:95:c7:ff:73:39:52:13:c8:23:97:00:6d: 05:48:2b:5c:30:93:d8:27:89:74:86:a4:61:46:2b: ba:2a:a5:ab:bf:f2:80:2a:bd:17:00:bd:14:e1:25: c5:c8:ca:ef:a1:87:de:0d:1c:68:15:a7:78:c8:b8: 41:a4:0e:28:4c:84:91:b5:de:41:cf:56:de:f1:82: 76:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D8:6D:F4:35:93:6B:99:F2:65:CA:44:2B:75:55:1A:64:0B:05:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c28b8968-a78b-3ae4-ac6d-961f2dc682ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:e3:68:87:77:d6:ab:13:5a:97:69:85:6a:39:a6:ce:39:9c: c4:63:da:fe:b2:cd:29:63:09:2b:7b:9d:31:8d:72:c5:e2:77: 11:e2:5c:e0:81:72:f7:65:38:c9:2f:d6:dc:b3:97:70:54:7c: 03:ba:f1:1b:84:d4:5b:ee:3b:b1:1f:1f:92:bd:e1:d8:ee:6a: a3:16:e2:39:77:ff:e1:5c:6f:43:3e:54:cf:c3:61:5c:99:95: c6:19:f6:2a:1f:5c:22:65:ab:3e:97:01:b9:c0:e4:49:58:ec: ae:82:ed:f0:f5:6d:c7:d1:ad:12:06:20:52:ac:e8:09:62:e8: f7:dd:cc:a6:31:3b:8d:24:a2:ca:be:7e:7f:c4:25:c2:9d:aa: 75:1f:73:f9:19:04:4c:23:eb:3f:34:c4:7f:f9:95:fb:ce:e5: 63:cb:38:ca:24:69:66:34:3e:13:8b:32:4e:da:b1:1d:af:16: 89:95:cb:98:00:74:e1:51:72:5f:58:b1:98:f7:20:e3:30:c9: 38:3d:e9:7f:d3:31:51:8f:e4:a8:1c:67:d9:e3:3b:cb:ec:66: 6e:08:76:a2:d3:8a:0e:cc:ff:ac:17:9f:31:2c:a7:0a:5c:ae: 46:ee:c5:3f:d8:66:b9:f9:8e:0f:8c:01:c8:bd:46:ee:ab:a9: c0:ce:14:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaU4s/NPGa7Se7kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk YjZiOTdiMTUtN2JkOS00Y2Y0LTkyYzctZGM1YjczNTQzYTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggMNnGnRJZgmG/esnstcVsOq3DuXi1ZZU0at mG6q8MhRhRi+SB3bAWyF0EWXHSno+7/u50qLAuMFekCfwQdTKiP93iytRK1IDzNY iqgMUTazd3KYeW+FW2DESUTOQvYAkUiEHGaGHL/thtmtyFT9SmcLRieSIvKAXLhV MnaOU+Su/7I3bC07T73BrUONJNxZCjV2s6cVKGfpqBM1e27uDMoKpdWG9wYL31Zh JlFwIyEsM9KB8Y2Vx/9zOVITyCOXAG0FSCtcMJPYJ4l0hqRhRiu6KqWrv/KAKr0X AL0U4SXFyMrvoYfeDRxoFad4yLhBpA4oTISRtd5Bz1be8YJ2lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjYbfQ1k2uZ8mXKRCt1VRpkCwV9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzI4Yjg5NjgtYTc4Yi0z YWU0LWFjNmQtOTYxZjJkYzY4MmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTjaId31qsTWpdphWo5ps45nMRj2v6yzSljCSt7nTGNcsXidxHiXOCB cvdlOMkv1tyzl3BUfAO68RuE1FvuO7EfH5K94djuaqMW4jl3/+Fcb0M+VM/DYVyZ lcYZ9iofXCJlqz6XAbnA5ElY7K6C7fD1bcfRrRIGIFKs6Ali6PfdzKYxO40kosq+ fn/EJcKdqnUfc/kZBEwj6z80xH/5lfvO5WPLOMokaWY0PhOLMk7asR2vFomVy5gA dOFRcl9YsZj3IOMwyTg96X/TMVGP5KgcZ9njO8vsZm4IdqLTig7M/6wXnzEspwpc rkbuxT/YZrn5jg+MAci9Ru6rqcDOFFE= -----END CERTIFICATE-----Generated at Thu Apr 17 08:59:30 2025 by rpki-client